Agency is a New York City-based artificial intelligence company founded in 2022[1][2] that provides security and compliance services. The company went through Y Combinator's Winter 2022 batch[3] and operates with a team size of 50[4]. Agency replaces traditional security and compliance headcount with AI[1], offering a platform that integrates with existing tools and GRC platforms[5]. The company delivers services through forward-deployed engineers who operate its platform and provide virtual CISO coverage[5]. Agency's offerings enable organizations to achieve and maintain various security and compliance certifications including SOC 2, ISO 27001, CMMC 2.0, HIPAA, GDPR, FedRAMP, HITRUST, and ISO 42001[5].
Alumni
In the news
- Musk’s faster path to more gas turbines comes with pollution problemElon Musk says a secretive new SpaceX foundry will let him cast his own turbine blades and get gas power online 18 months faster than anyone else — but it's a bet on a fuel source that's already triggering lawsuits and health studies everywhere his (and others') turbines have gone in.
- At TechBBQ, Europe’s AI conversations kept coming back to: Who’s actually in control?Investors, founders, and operators from across Europe arrived for the annual Nordic TechBBQ conference to talk about how humans can have agency over AI.
About
- Agency replaces traditional security and compliance headcount with AI without replacing your existing tools. Our platform is operated by forward-deployed engineers who run your entire security and compliance program including full virtual CISO coverage on your behalf. All powered by our proprietary AI agents. Agency is a vertically integrated AI platform and services company that enables organizations to achieve and maintain SOC 2, ISO 27001, CMMC 2.0, HIPAA, GDPR, FedRAMP, HITRUST, ISO 42001, and more without building internal teams. We integrate with leading GRC platforms like Vanta and Drata and security tools like CrowdStrike. At its core is our proprietary cybersecurity and GRC orchestration layer powering a suite of AI systems that execute end-to-end security and compliance operations: control implementation, evidence collection, monitoring, vendor risk, penetration testing, and audit coordination — across complex environments like BYODs, contractor fleets, and multi-party systems. Things that GRC automation platforms can't do. We deliver this through two distinctly separate products: Agency Comply — forward-deployed engineers who operate the platform, implemen[5]
Something wrong or missing? Send an update. Fixed within 24 hours.